In reply to E.T.Cook (@etc).

@E.T. I agree with the sentiment, but there are some inaccuracies in your own article. You're calling Cory Miller a dev and self-proclaimed security expert, I don't think he claims either. He just runs a business that has a security plugin among its portfolio. Meanwhile, Lema has ties to Ithemes so he is naturally going to sympathise.

To me it's just a plain case of procrastinating on something that should be taken far more seriously and dealt with a long time ago. I don't think people should spring to their defense when they failed their customers in an inexcusable manner. It's strange to me that a lot of folks are downplaying the issue. I think that sets the wrong example; that it's okay to make these kinds of mistakes, you can always recoup by being transparent in case things go wrong.

The business lesson is good though, every communication is an opportunity to strengthen relationships, and they've managed to do that. They've also managed to control the narrative before being outed by another party, which would look a lot worse.